{
	"id": "dbf58258-be12-4b28-bd34-b0d08fc5d23f",
	"created_at": "2026-04-06T00:09:02.532245Z",
	"updated_at": "2026-04-10T03:31:50.200224Z",
	"deleted_at": null,
	"sha1_hash": "6aef026bd40ca5ed877f1ac68165897951e6db98",
	"title": "GitHub - XZB-1248/Spark: ✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 2788608,
	"plain_text": "GitHub - XZB-1248/Spark: ✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT)\r\nwritten in Go that allows you control all your devices anywhere.\r\nSpark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和\r\n监控工具，你可以随时随地监控和控制所有设备。\r\nBy XZB-1248\r\nArchived: 2026-04-05 22:32:36 UTC\r\n[English] [中文] [API Document] [API文档]\r\nSpark is a free, safe, open-source, web-based, cross-platform, and full-featured RAT (Remote Administration\r\nTool) that allows you to control all your devices via browser anywhere.\r\n✅ No data collection: Spark does not collect any user information.\r\n✅ No auto-updates: The server will not update itself.\r\n✅ Direct communication: Clients communicate exclusively with your server.\r\nrepo size 6.1 MiB issues 22 open issues 40 closed\r\ndownloads 3 1 k downloads@latest 2 3 k\r\n⚠️ Disclaimer\r\nTHIS PROJECT, ITS SOURCE CODE, AND RELEASES SHOULD ONLY BE USED FOR\r\nEDUCATIONAL PURPOSES.\r\n❌ Illegal usage is strictly prohibited.\r\n❌ Authors and developers are not responsible for any misuse.\r\n✅ Use it at your own risk.\r\nIf you find security vulnerabilities, do not open an issue. Contact me immediately via email.\r\n🚀 Quick Start\r\nBinary Execution\r\nhttps://github.com/XZB-1248/Spark\r\nPage 1 of 9\n\n1. Download the executable from the releases page.\r\n2. Follow the Configuration instructions.\r\n3. Run the executable and access the web interface at http://IP:Port .\r\n4. Generate a client and run it on the target device.\r\n5. Start managing your devices!\r\n⚙️ Configuration\r\nThe configuration file config.json should be in the same directory as the executable.\r\nExample:\r\n{\r\n \"listen\": \":8000\",\r\n \"salt\": \"123456abcdef123456\",\r\n \"auth\": {\r\n \"username\": \"password\"\r\n },\r\n \"log\": {\r\n \"level\": \"info\",\r\n \"path\": \"./logs\",\r\n \"days\": 7\r\n }\r\n}\r\nMain Parameters:\r\nlisten (required): Format IP:Port .\r\nsalt (required): Max length 24 characters. After modification, all clients need to be regenerated.\r\nauth (optional): Authentication credentials ( username:password ).\r\nHashed passwords are recommended ( $algorithm$hashed-password ).\r\nSupported algorithms: sha256 , sha512 , bcrypt .\r\nlog (optional): Logging configuration.\r\nlevel : disable , fatal , error , warn , info , debug .\r\npath : Log directory (default: ./logs ).\r\ndays : Log retention days (default: 7 ).\r\n️ Features\r\nFeature/OS Windows Linux MacOS\r\nProcess Manager ✔ ✔ ✔\r\nhttps://github.com/XZB-1248/Spark\r\nPage 2 of 9\n\nFeature/OS Windows Linux MacOS\r\nKill Process ✔ ✔ ✔\r\nNetwork Traffic ✔ ✔ ✔\r\nFile Explorer ✔ ✔ ✔\r\nFile Transfer ✔ ✔ ✔\r\nFile Editor ✔ ✔ ✔\r\nDelete File ✔ ✔ ✔\r\nCode Highlighting ✔ ✔ ✔\r\nDesktop Monitor ✔ ✔ ✔\r\nScreenshot ✔ ✔ ✔\r\nOS Info ✔ ✔ ✔\r\nRemote Terminal ✔ ✔ ✔\r\n* Shutdown ✔ ✔ ✔\r\n* Reboot ✔ ✔ ✔\r\n* Log Off ✔ ❌ ✔\r\n* Sleep ✔ ❌ ✔\r\n* Hibernate ✔ ❌ ❌\r\n* Lock Screen ✔ ❌ ❌\r\n🚨 Functions marked with * may require administrator/root privileges.\r\n📸 Screenshots\r\nhttps://github.com/XZB-1248/Spark\r\nPage 3 of 9\n\nhttps://github.com/XZB-1248/Spark\r\nPage 4 of 9\n\nhttps://github.com/XZB-1248/Spark\r\nPage 5 of 9\n\nhttps://github.com/XZB-1248/Spark\r\nPage 6 of 9\n\n🔧 Development\r\nComponents\r\nThis project consists of three main components:\r\nClient\r\nServer\r\nFront-end\r\nFor OS support beyond Linux and Windows, additional C compilers may be required. For example, to support\r\nAndroid, install Android NDK.\r\nBuild Guide\r\n# Clone the repository\r\ngit clone https://github.com/XZB-1248/Spark\r\ncd ./Spark\r\n# Build the front-end\r\ncd ./web\r\nnpm install\r\nnpm run build-prod\r\n# Embed static resources\r\ncd ..\r\ngo install github.com/rakyll/statik\r\nstatik -m -src=\"./web/dist\" -f -dest=\"./server/embed\" -p web -ns web\r\nhttps://github.com/XZB-1248/Spark\r\nPage 7 of 9\n\n# Build the client\r\nmkdir ./built\r\ngo mod tidy\r\ngo mod download\r\n./scripts/build.client.sh\r\n# Build the server\r\nmkdir ./releases\r\n./scripts/build.server.sh\r\nCustom Features\r\nIf you need to customize some features, please contact me via i@1248.ink.\r\nDependencies\r\nSpark contains many third-party open-source projects.\r\nLists of dependencies can be found at go.mod and package.json .\r\nSome major dependencies are listed below.\r\nBack-end\r\nGo (License)\r\ngin-gonic/gin (MIT License)\r\nimroc/req (MIT License)\r\nkbinani/screenshot (MIT License)\r\nshirou/gopsutil (License)\r\ngorilla/websocket (BSD-2-Clause License)\r\norcaman/concurrent-map (MIT License)\r\nFront-end\r\nReact (MIT License)\r\nAnt-Design (MIT License)\r\naxios (MIT License)\r\nxterm.js (MIT License)\r\nhttps://github.com/XZB-1248/Spark\r\nPage 8 of 9\n\ncrypto-js (MIT License)\r\nAcknowledgements\r\nnatpass (MIT License)\r\nStargazers over time\r\n0\r\n270\r\n540\r\n800\r\n1070\r\n1340\r\n1600\r\n1870\r\n2140\r\n2400\r\nStargazers\r\n2022-03-16 2022-08-27 2023-02-08 2023-07-23 2024-01-03 2024-06-16 2024-11-27 2025-05-11 2025-10-22 2026-04-05\r\nTime\r\n📜 License\r\nDistributed under the BSD-2 License.\r\nSource: https://github.com/XZB-1248/Spark\r\nhttps://github.com/XZB-1248/Spark\r\nPage 9 of 9",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://github.com/XZB-1248/Spark"
	],
	"report_names": [
		"Spark"
	],
	"threat_actors": [
		{
			"id": "aa73cd6a-868c-4ae4-a5b2-7cb2c5ad1e9d",
			"created_at": "2022-10-25T16:07:24.139848Z",
			"updated_at": "2026-04-10T02:00:04.878798Z",
			"deleted_at": null,
			"main_name": "Safe",
			"aliases": [],
			"source_name": "ETDA:Safe",
			"tools": [
				"DebugView",
				"LZ77",
				"OpenDoc",
				"SafeDisk",
				"TypeConfig",
				"UPXShell",
				"UsbDoc",
				"UsbExe"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "f87ef0bf-0574-492f-aebc-63e5953938e2",
			"created_at": "2024-11-23T02:00:04.116692Z",
			"updated_at": "2026-04-10T02:00:03.779803Z",
			"deleted_at": null,
			"main_name": "Gorilla",
			"aliases": [],
			"source_name": "MISPGALAXY:Gorilla",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434142,
	"ts_updated_at": 1775791910,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/6aef026bd40ca5ed877f1ac68165897951e6db98.pdf",
		"text": "https://archive.orkl.eu/6aef026bd40ca5ed877f1ac68165897951e6db98.txt",
		"img": "https://archive.orkl.eu/6aef026bd40ca5ed877f1ac68165897951e6db98.jpg"
	}
}